CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

133 matches found

IBM Security Bulletins•added 2026/06/01 6:11 a.m.•10 views

Security Bulletin:Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP

Summary Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads...

6.9CVSS5.8AI score0.00644EPSS

Exploits0Affected Software1

CNNVD•added 2026/05/27 12:0 a.m.•7 views

WordPress plugin Livemesh Addons for Beaver Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.8AI score0.00223EPSS

Exploits0References4

RedhatCVE•added 2026/01/09 9:25 a.m.•6 views

CVE-2023-4919

The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the iframe shortcode in versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permission and above, ...

6.4CVSS5.7AI score0.00519EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 8:33 a.m.•5 views

CVE-2024-39802

Multiple buffer overflow vulnerabilities exist in the qos.cgi qossettings functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A buffer...

9.1CVSS7.3AI score0.00845EPSS

Exploits1References1